capsule
capsule copied to clipboard
feat: Permission API block
Working from the conversation in this PR: https://github.com/projectcapsule/capsule/pull/1332
Original feature was to implement a flag for the webhook to allow creation of namespace, by letting some users impersinate the owner.
After feedback from @oliverbaehler this has changed to be a new API block in the Tenant resource, for controlling the RBAC for the Capsule Tenant.
Features:
- Keeping the old functionality of the
AdditionalRoleBindingsfield. - Providing an option for Capsule to create
ClusterRoleBindings(Addressing this issue #1386 ) - Providing a way of specifying the namespaces for the
RoleBindingswith the use of a namespace selector.